(legacy) ipsec, only suffix connection number with sequence when there are more then 1 items

src/etc/inc/vpn.inc

@@ -819,7 +819,12 @@ EOD;
             if (!isset($ph1ent['mobile']) && $keyexchange == 'ikev1') {
                 // ikev1 not mobile
                 for ($idx = 0 ; $idx < count($leftsubnet_spec) ; ++$idx) {
-                    $tmpconf =  str_replace('<<connectionId>>', "{$ph1ent['ikeid']}-00{$idx}", $connEntry);
+                    if (count($leftsubnet_spec) == 1) {
+                        $tmpconf =  str_replace('<<connectionId>>', "{$ph1ent['ikeid']}", $connEntry);
+                    } else {
+                        // suffix connection with sequence number
+                        $tmpconf =  str_replace('<<connectionId>>', "{$ph1ent['ikeid']}-00{$idx}", $connEntry);
+                    }
                     $tmpconf .= "\trightsubnet =" . $rightsubnet_spec[$idx]. "\n" ;
                     $tmpconf .= "\tleftsubnet = " . $leftsubnet_spec[$idx] . "\n";
                     $ipsecconf .= $tmpconf;